Dev Tools · 1h ago
Azure Policy blocks unscoped blob lifecycle rules
Azure Blob Storage lifecycle rules without filters can accidentally delete or transition all blobs in an account. A new Azure Policy definition denies creation of such unfiltered rules, preventing costly mistakes. The policy targets storage account management policies and checks for missing prefixMatch or blobIndexMatch filters.
Meridian48 take
This is a practical guardrail for DevOps teams, but the real fix is better default behavior from Azure itself.
azure-policyblob-storage